Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
File: q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft (raw, json)
Hash identifier: h7gQjHuyuC2hGFVoyI/cDOsJOR/f6gK3BHJf81iMdBI=
Subject key identifier: 46:09:E7:4B:CE:C0:8E:26:EA:EA:E6:3F:1D:2E:40:41:06:30:2A:74
Authority key identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
Certificate issuer: /CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Certificate serial: 019A4E86BF5D0D230409E4B74D815C37218A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 11:00:44 +0000
Manifest this update: Tue 04 Nov 2025 11:00:44 +0000
Manifest next update: Wed 05 Nov 2025 11:00:44 +0000
Files and hashes: 1: MvXI14tDwVTEk5R-D7-LraqIO4w.roa (hash: 3BHAzhEhaXiTqmDVNfIXzHzlk0Nw0qhzvKzpdNvcPCU=)
2: q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl (hash: r64T0EqP+Ixh1SeM8T/EBXG4+1RjZOXsrJZJ10vCXhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:bf:5d:0d:23:04:09:e4:b7:4d:81:5c:37:21:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Validity
Not Before: Nov 4 11:00:44 2025 GMT
Not After : Nov 5 11:00:44 2025 GMT
Subject: CN=4609e74bcec08e26eaeae63f1d2e404106302a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:53:76:32:e4:8e:83:59:21:6e:a8:52:96:75:
d1:ce:29:59:a9:35:3c:de:34:76:8c:2d:2d:cc:ef:
c0:b6:c4:23:78:b5:1b:42:82:6a:ad:0d:8e:b1:ff:
24:b0:da:05:30:58:80:7c:d8:8e:06:05:88:0f:7a:
12:b8:8e:00:4c:a9:00:2b:11:db:6a:d1:ee:59:c6:
16:c0:5c:04:07:ff:13:68:cd:78:c2:ab:4e:e0:9f:
13:77:ac:fe:8e:cc:7f:36:ab:f5:4c:64:df:97:be:
85:34:52:ec:42:db:da:40:d0:42:79:c7:de:4b:98:
98:f9:65:3a:36:21:34:9d:a8:ac:c6:e5:f4:58:1e:
04:9d:f9:ce:4a:3b:ad:df:65:38:6b:0e:39:bd:70:
33:0a:98:ad:19:e7:c2:cc:f0:b9:18:32:6f:66:55:
a5:17:47:ad:c6:fc:83:f4:99:b4:03:d3:33:be:ca:
79:cb:3d:f6:8e:79:11:c4:94:55:2a:55:c4:a4:09:
e0:d6:ad:e9:d1:97:79:9f:35:2e:65:32:00:89:ed:
e3:7d:02:ee:b9:d4:1a:37:d3:f4:0b:5b:b9:59:f3:
bf:e9:eb:14:2e:ad:e2:72:cd:ac:32:fa:61:e5:03:
04:b4:55:82:a1:4d:71:4e:6c:94:c6:d0:60:29:3f:
a2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:09:E7:4B:CE:C0:8E:26:EA:EA:E6:3F:1D:2E:40:41:06:30:2A:74
X509v3 Authority Key Identifier:
keyid:AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:cd:c2:0f:45:3a:1b:20:41:25:c9:79:ff:14:b2:c7:a9:40:
c8:ba:d3:da:87:62:b7:16:1f:f2:70:af:d9:53:3b:74:e6:13:
5c:34:ce:ca:df:83:0a:7f:e0:0b:1f:31:32:92:3d:af:ee:67:
d3:b0:7e:5b:4e:21:a4:e1:f0:1d:c6:67:a8:07:85:a4:d4:e2:
3d:10:4b:8c:88:62:e9:9d:89:b6:21:6d:d5:f2:c9:95:cb:27:
73:b9:32:aa:8a:f4:e7:5b:04:dd:2e:bd:73:e4:46:a6:8d:3b:
6a:44:4a:ef:8b:a6:bc:a8:ce:b3:50:9e:0b:80:4a:f6:29:5b:
2b:08:3c:4e:e0:d3:d5:b0:45:f1:c9:99:91:eb:ff:7a:b1:ba:
a3:9e:d6:f6:e2:78:b5:e0:78:01:94:73:54:b7:50:31:d7:f7:
07:1d:df:81:4a:da:f4:3c:47:d1:d1:65:d2:56:f7:a0:17:98:
1a:ec:61:b5:50:73:87:82:8c:f4:34:bc:91:5c:6f:0d:b6:ac:
d5:60:d8:e4:b7:5b:a0:04:86:a8:57:47:a0:b2:08:00:06:47:
d2:dd:ab:a4:18:8d:ad:32:cf:8f:14:50:ee:a8:a2:6b:bf:a8:
0e:da:20:25:88:78:7a:2a:c6:01:f2:0f:4b:86:c1:ce:86:7c:
a1:21:04:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:47 2025 by rpki-client